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IN THE CLAIMS 
Amended claims follow: 

1 . (Previously Amended) A method for scanning data read from storage, 
comprising: 

a) receiving a request for data saved in storage from a central processing unit; 

b) scanning the requested data for malicious code; and 

c) transmitting the data from the storage to the central processing unit if 
malicious code is not found in the data during the scanning; 
wherein the scanning is performed by a scanning module coupled to a 
storage subsystem controller; 

wherein a user is allowed to disable the scanning module, and data is 
precluded from being transmitted from the storage to the central processing 
unit upon the disabling of the scanning module. 

2. (Original) The method as recited in claim 1. wherein the storage is selected 
from the group consisting of a hard drive, compact disc-read only memory 
(CD-ROM), and a floppy disk. 

3. (Cancelled) 

4. (Previously Amended) The method as recited in claim 1, wherein the storage 
subsystem controller is coupled to a storage driver which is coupled to the 
central processing unit, where the storage driver is coupled between the 
storage subsystem controller and the central processing unit, so that the 
storage subsystem controller and the central processing unit must 
communicate therethrough. 

5. (Previously Amended) The method as recited in claim 1, wherein the storage 
subsystem controller is coupled to the storage. 
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6. (Previously Amended) The method as recited in claim I, wherein the 
scanning module includes software. 

7. (Previously Amended) The method as recited in claim 1, wherein the 
scanning module includes hardware. 

8. (Cancelled) 

9. (Cancelled) 

10. (Original) The method as recited in claim \, and further comprising 
executing an event based on results of the scanning. 

1 1 . (Original) The method as recited in claim 1 0, wherein the event includes an 
alert. 

12. (Original) The method as recited in claim 10, and further comprising 
disabling the scanning module in response to the event. 

13. (Cancelled^ 

14. (Original) The method as recited in claim 1 > wherein the scanning includes 
content scanning. 

15. (Original) The method as recited in claim 1, wherein the scanning includes 
virus scanning. 

16. (Original) The method as recited in claim 1, wherein the storage is accessible 
via a network. 
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1 7. (Previously Amended) A computer program product for scanning data read 
from storage, comprising: 

a) computer code for receiving a request for data saved in storage from a central 
processing unit; 

b) computer code for scanning the requested data for malicious code; and 

c) computer code for transmitting the data from the storage to the central 
processing unit if malicious code is not found in the data during the 
scanning; 

wherein the scanning is performed by a scanning module coupled to a 
storage subsystem controller; 

wherein a user is allowed to disable the scanning module, and data is 
precluded from being transmitted from the storage to the central processing 
unit upon the disabling of the scanning module. 

1 8. (Original) The computer program product as recited in claim 1 7, wherein the 
storage is selected from the group consisting of a hard drive, compact disc- 
read only memory (CD-ROM), and a floppy disk. 

19. (Cancelled) 

20. (Previously Amended) The computer program product as recited in claim 17, 
wherein the storage subsystem controller is coupled to a storage driver which 
is coupled to the central processing unit, where the storage driver is coupled 
between the storage subsystem controller and the central processing unit, so 
that the storage subsystem controller and the central processing unit must 
communicate therethrough. 

21 . (Previously Amended) The computer program product as recited in claim 17, 
wherein the storage subsystem controller is coupled to the storage. 
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22. (Previously Amended) The computer program product as recited in claim 1 7, 
wherein the scanning module includes software. 

23. (Previously Amended) The computer program product as recited in claim 17, 
wherein the scanning module includes hardware. 

24. (Cancelled) 

25. (Cancelled) 

26. (Original) The computer program product as recited in claim 19, and further 
comprising computer code for executing an event based on results of the 
scanning. 

27. (Original) The computer program product as recited in claim 26, wherein the 
event includes an alert. 

28. (Original) The computer program product as recited in claim 26, and further 
comprising computer code for disabling the scanning module in response to 
the event. 

29. (Original) The computer program product as recited in claim 28, wherein 
data is precluded from being transmitted from the storage to the central 
processing unit upon the disabling of the scanning module. 

30. (Original) The computer program product as recited in claim 1 7, wherein the 
scanning includes content scanning. 

31 . (Original) The computer program product as recited in claim 17, wherein the 
scanning includes virus scanning. 
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32. (Original) The computer program product as recited in claim 17, wherein the 
storage is accessible via a network. 

33. (Previously Amended) A method for scanning data written to storage, 
comprising: 

a) receiving a request for data to be written in storage, the request being 
received from a central processing unit; 

b) scanning the data for malicious code; and 

c) writing the data to the storage if malicious code is not found in the data 
during the scanning; 

wherein the scanning is performed by a scanning module coupled to a 
storage subsystem controller; 

wherein a user is allowed to disable the scanning module, and data is 
precluded from being transmitted to the storage from the central processing 
unit upon the disabling of the scanning module. 

34. (Previously Amended) A computer program product for scanning data 
written to storage, comprising: 

a) computer code for receiving a request for data to be written in storage, the 
request being received from a central processing unit; 

b) computer code for scanning the data for malicious code; and 

c) computer code for writing the data to the storage if malicious code is not 
found in the data during the scanning; 

wherein the scanning is performed by a scanning module coupled to a 
storage subsystem controller; 

wherein a user is allowed to disable the scanning module, and data is 
precluded from being transmitted to the storage from the central processing 
unit upon the disabling of the scanning module. 

35. (Previously Amended) A system for scanning data read from storage, 
comprising: 
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a) storage for saving data therein; 

b) a storage subsystem controller coupled to the storage for controlling access 
to the data saved therein; 

c) a central processing unit coupled to the storage subsystem controller for 
issuing read requests for reading the data saved therein for processing 
purposes, and write requests for writing data to the storage; 

d) a scanning module coupled to the central processing unit and the storage 
subsystem controller, the scanning module adapted for identifying the 
requests from the central processing unit, and scanning the data for malicious 
code in response to the requests; and 

e) an event manager module coupled to the scanning module and the central 
processing unit, the event manager module adapted for receiving results of 
the scanning from the scanning module, the event manager module adapted 
to execute an event based on the results of the scanning; 

f) wherein the centra! processing units is conditionally allowed to read the data 
saved in the storage and write data to the storage based on the results of the 
scanning; 

g) wherein a user is allowed to disable the scanning module, and data is 
precluded from being transmitted between the storage and the central 
processing unit upon the disabling of the scanning module. 

36. (Original) The system as recited in claim 35, wherein the scanning module is 
coupled to the storage subsystem controller via a bus. 

37. (Original) The system as recited in claim 35, wherein the scanning module is 
directly coupled to the storage subsystem controller. 

38. (Previously Amended) The system as recited in claim 35, wherein the 
scanning module is coupled to the storage subsystem controller via a storage 
driver, where the storage driver is coupled between the storage subsystem 
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controller and the central processing unit, so that the storage subsystem 
controller and the central processing unit must communicate therethrough. 

39. (Previously Amended) A system for scanning data read from storage, 
comprising: 

a) means for saving data therein; 

b) means for controlling access to the data saved therein; 

c) means for issuing read requests for reading the data saved therein for 
processing purposes and write requests for writing data to the storage; 

d) means for identifying the requests from the central processing unit, and 
scanning the data for malicious code in response to the requests; and 

e) means for receiving results of the scanning from the scanning module, the 
event manager module adapted to execute an event based on the results of 
the scanning; 

f) wherein the central processing units is conditionally allowed to read the data 
saved in the storage and write data to the storage based on the results of the 
scanning; 

g) wherein a user is allowed to disable the scanning module, and data is 
precluded from being transmitted between the storage and the central 
processing unit upon the disabling of the scanning module. 

40. (Previously Presented) The method as recited in claim I, wherein the user 
includes a remote administrator. 

41 . (Previously Presented) The method as recited in claim 1, wherein the user is 
allowed to disable the storage, and the data is precluded from being 
transmitted to the storage from the central processing unit upon the disabling 
of the storage. 
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42. (Previously Presented) The method as recited in claim 41, wherein it is 

determined whether the storage is disabled only after determining whether 
the scanning module is disabled. 



43. (Previously Presented) The method as recited in claim 42, wherein the 
disabling and enabling of the storage and the scanning module provides 
increased functionality in conditionally precluding transmission of the data to 
the storage from the central processing unit. 
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